R50 · Institutional mechanism monitoring without person tracking
A collective remedy is not durable when the same exclusion returns under a renamed rule, a new vendor, a correlated proxy, a retrained model, a hidden queue, or a fragmented institution. Independent oversight must detect functional recurrence without constructing a permanent list of affected people.
All nine scenarios are fictional. They describe no real person, institution, vendor, allegation, or event. They are accountable-design demonstrations—not legal advice, factual accusations, or proof that any named system uses these practices.
Nine bounded demonstrations
The set includes independently attested, contained, fragmented, partially observed, and failed outcomes. A changed name or policy document never receives a clean result by itself.
CRE-R50-001 · housing
A fictional housing institution renames a retired freshness rule, but synthetic applicants receive the same hold until the monitor detects and contains the workaround.
The receipt does not require public disclosure of a person-level case file.
Status boundaryEvasion occurred and was contained; this is not displayed as a clean history.
What the prior remedy promised
The R49 receipt and exact source-artifact hash anchor the promise. The institution cannot redefine success after the mechanism changes.
Accountable owner: Collective-remedy enforcement owner (fictional)
Required closure proof: Operational evidence that the prohibited effect stopped across every declared mechanism and downstream participant.
No group pattern, proxy, cluster, or successor mechanism may become individual guilt, risk scoring, surveillance targeting, or eligibility denial.
R49 outcome: Redress Verified
Receipt hash
whole source artifact bytes and canonical R49 receipt
What changed operationally
Rule names, vendors, purposes, and workflow locations can change while the effect remains materially identical.
Simplify terminology after the collective remedy.
The change became effective 2026-09-02. A renamed or relocated process must still be tested against the prohibited effect.
Twelve anti-evasion dimensions
The test compares operational effect, affected pathways, downstream use, and correction persistence—not vendor branding or policy wording.
The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.
This fictional test does not establish prevalence, intent, culpability, or facts about any real institution or person.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic canaries and operational traces reproduced the same prohibited consequence despite the changed label or placement.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.
Public-interest monitoring boundary
The monitor is separate, bounded, conflict-disclosing, and unable to authorize person-level adverse action.
Time-bounded fictional monitoring mandate limited to institutional mechanisms and remedy enforcement.
Access: Full
Funding may not depend on clean findings, enforcement volume, or person-level outcomes.
Revocation risk: Access may be narrowed by contract or technical control and must be reported as an evidence gap.
CAN-R50-001-A
Detect recurrence of the retired adverse effect without tracking an affected person.
CAN-R50-001-B
Test downstream propagation and re-import behavior without a person registry.
Bounded evidence window
Absence of a detected failure is never represented as proof about an inaccessible surface.
The observation window and declared surfaces bound every conclusion.
All declared surfaces were observed during the bounded fictional window.
Operational outcome
Policy text is insufficient. The receipt tests active pathways, downstream use, recurrence canaries, and correction persistence.
The R49 pattern or successor mechanism could produce an adverse consequence without individualized evidence.
The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.
The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.
Synthetic R50 evidence packet for baseline pinned.
Synthetic R50 evidence packet for mechanism mapped.
Synthetic R50 evidence packet for replacement detected.
Synthetic R50 evidence packet for functional equivalence tested.
Synthetic R50 evidence packet for evasion detected.
Synthetic R50 evidence packet for proxy substitution tested.
Synthetic R50 evidence packet for federation scope checked.
Synthetic R50 evidence packet for remedy effect observed.
Synthetic R50 evidence packet for evasion contained.
Non-delegable boundary
R50 inherits R49’s individualized-action firewall and further bars the monitor from issuing an individual adverse action.
The monitor may investigate and report an institutional effect. It cannot authorize adverse action against an individual.
Unfinished work remains visible
A missing surface, participant, reversal, or deactivation proof cannot be compressed into a clean badge.
Machine-auditable without becoming a person dossier
Hashes protect receipt lineage and transformation scope. They are not person identifiers or reusable cohort handles.
{
"clean_result": false,
"domain": "housing",
"evasion_class": "rule_renaming",
"federation_scope": {
"fragmentation_detected": false,
"missing_participants": [],
"participant_reentry_checked": false,
"participants_declared": 4,
"participants_observed": 4,
"person_registry_used": false
},
"fictional": true,
"functional_equivalence": {
"contract": "antichrist.cx.functional-equivalence-test.v1",
"dimensions": {
"derived_labels": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"export_reimport": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"human_note_instructions": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"model_retraining": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"new_vendor": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"proxy_substitution": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"queue_prioritization": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"renamed_fields": {
"evidence": "Synthetic canaries and operational traces reproduced the same prohibited consequence despite the changed label or placement.",
"status": "equivalent"
},
"retention_cache_behavior": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"subsidiary_fragmentation": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"threshold_changes": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
},
"workflow_relocation": {
"evidence": "Synthetic control and replacement traces did not reproduce the retired adverse pathway on this dimension.",
"status": "different"
}
},
"does_not_establish": "This fictional test does not establish prevalence, intent, culpability, or facts about any real institution or person.",
"evasion_detected": true,
"evidence_summary": "The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.",
"overall": "equivalent_harmful",
"replacement_reproduces_prohibited_effect": true
},
"human_accountability": {
"authority_can_change_mechanism": true,
"independent_signatory": "Independent public-interest signatory (fictional)",
"institutional_owner": "Collective-remedy enforcement owner (fictional)",
"regulatory_escalation_owner": "Public accountability escalation officer (fictional)"
},
"independent_oversight": {
"access_limits": [
"Declared R50 observation window",
"Synthetic and aggregated evidence before affected-person data",
"No unrestricted person-level browsing"
],
"access_revocation_risk": "Access may be narrowed by contract or technical control and must be reported as an evidence gap.",
"access_status": "full",
"affected_person_data_minimized": true,
"authority_basis": "Time-bounded fictional monitoring mandate limited to institutional mechanisms and remedy enforcement.",
"can_authorize_individual_adverse_action": false,
"confidential_contest_route": "/contestability/",
"conflicts_disclosed": [
"No operational role in the fictional decision system",
"No authority to issue individual adverse actions"
],
"funding_boundary": "Funding may not depend on clean findings, enforcement volume, or person-level outcomes.",
"monitor_name": "Independent public-interest monitor (fictional)",
"observed_surfaces": [
"policy_documentation",
"production_rule_configuration",
"decision_logs",
"vendor_exports",
"queue_priorities",
"feature_model_lineage",
"human_note_templates",
"caches_retention",
"downstream_reimport",
"federation_participants"
],
"organizationally_separate": true,
"public_person_registry": false,
"publishes_person_level_allegations": false,
"publishes_person_level_scores": false,
"synthetic_canaries": [
{
"canary_id": "CAN-R50-001-A",
"contains_personal_data": false,
"purpose": "Detect recurrence of the retired adverse effect without tracking an affected person.",
"synthetic": true
},
{
"canary_id": "CAN-R50-001-B",
"contains_personal_data": false,
"purpose": "Test downstream propagation and re-import behavior without a person registry.",
"synthetic": true
}
],
"unobserved_surfaces": []
},
"individualized_action_firewall": {
"eligibility_denial_from_pattern_prohibited": true,
"oversight_may_authorize_adverse_action": false,
"pattern_may_trigger_institutional_investigation_only": true,
"person_level_risk_scoring_prohibited": true,
"requires_accountable_human_review": true,
"requires_contest": true,
"requires_correction": true,
"requires_event_specific_individualized_evidence": true,
"requires_notice": true,
"surveillance_targeting_from_pattern_prohibited": true
},
"institutional_change": {
"after": "Resident consistency review",
"before": "Adverse-record freshness gate",
"change_flags": {
"federation_fragmented": false,
"model_changed": false,
"name_changed": true,
"participant_reentered": false,
"proxy_changed": false,
"vendor_changed": false,
"workflow_changed": false
},
"change_type": "rule_renaming",
"claimed_newness_is_not_proof": true,
"claimed_purpose": "Simplify terminology after the collective remedy.",
"declared_change_categories": {
"documentary_operational_divergence": false,
"model_retraining": false,
"multi_vector_evasion": false,
"oversight_access_loss": false,
"participant_reentry": false,
"proxy_substitution": false,
"rule_renaming": true,
"subsidiary_fragmentation": false,
"vendor_transfer": false
},
"effective_at": "2026-09-02"
},
"integrity": {
"input_sha256": "b81215e1f666df58b7f1bb31505bb724c9220596a100f6a0ae88bd357dbe8a1f",
"output_sha256": "5ef2f02105e4b54a750a3cac3f89776d18333fb0367f750c99bac68e1abafbbc",
"receipt_sha256": "113649fa45af37b1bf9aeed0d0774084700109198aef0ac2a6643acb972016f6"
},
"mechanism_map": [
{
"after": "Resident consistency review",
"before": "Adverse-record freshness gate",
"layer": "decision mechanism",
"mechanism_id": "CRE-R50-001-M01",
"observed_effect": "The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.",
"owner": "Institutional implementation owner (fictional)",
"status": "replacement_active"
},
{
"after": "R50 monitored downstream decision path",
"before": "R49 remedy propagation obligation",
"layer": "downstream enforcement",
"mechanism_id": "CRE-R50-001-M02",
"observed_effect": "Tracks whether the old adverse consequence remains operative after the institutional change.",
"owner": "Downstream remediation owner (fictional)",
"status": "replacement_active"
}
],
"observation_plan": {
"absence_of_evidence_is_evidence_of_absence": false,
"affected_person_data_minimized": true,
"bounded": true,
"declared_surfaces": [
"policy_documentation",
"production_rule_configuration",
"decision_logs",
"vendor_exports",
"queue_priorities",
"feature_model_lineage",
"human_note_templates",
"caches_retention",
"downstream_reimport",
"federation_participants"
],
"known_limit": "The observation window and declared surfaces bound every conclusion.",
"methods": [
"synthetic canaries",
"aggregated outcome traces",
"configuration diffs",
"confidential affected-person contest intake"
],
"observed_surfaces": [
"policy_documentation",
"production_rule_configuration",
"decision_logs",
"vendor_exports",
"queue_priorities",
"feature_model_lineage",
"human_note_templates",
"caches_retention",
"downstream_reimport",
"federation_participants"
],
"unobserved_surfaces": [],
"window_end": "2026-12-31",
"window_start": "2026-09-01"
},
"open_obligations": [],
"promised_remedy": {
"accountable_owner": "Collective-remedy enforcement owner (fictional)",
"prohibited_effect": "No group pattern, proxy, cluster, or successor mechanism may become individual guilt, risk scoring, surveillance targeting, or eligibility denial.",
"promise": "Retire stale-data holds and allocate correction without constructing a suspect-tenant cohort.",
"proof_required": "Operational evidence that the prohibited effect stopped across every declared mechanism and downstream participant.",
"r49_terminal_state": "redress_verified"
},
"r49_lineage": {
"hash_scope": "whole source artifact bytes and canonical R49 receipt",
"r49_receipt_id": "CPR-R49-001",
"r49_receipt_sha256": "0d69a5878c2add635eaed07e1f8a3ab613dce8039e47f7d0b84d7ea6e796366c",
"source_artifact": "data/collective-redress-r49.json",
"source_artifact_sha256": "2a2252ca51226485f5517362092989a760c6a08deade1c8f120cb6eaa0154b52"
},
"receipt_id": "CRE-R50-001",
"release": "R50",
"remedy_effect": {
"affected_pathways_checked": 10,
"baseline_effect": "The R49 pattern or successor mechanism could produce an adverse consequence without individualized evidence.",
"correction_persists": true,
"downstream_use_operational": false,
"old_effect_operational": false,
"proof_summary": "The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.",
"replacement_effect": "The renamed rule reproduced the same hold; the branch was disabled, prior effects were reversed, and recurrence canaries now pass.",
"synthetic_canaries_passed": 1
},
"schema": "antichrist.cx.collective-remedy-enforcement-receipt.v1",
"state_history": [
{
"evidence": "Synthetic R50 evidence packet for baseline pinned.",
"observed_at": "2026-09-02T12:00:00Z",
"owner": "R50 lineage custodian (fictional)",
"sequence": 1,
"state": "baseline_pinned"
},
{
"evidence": "Synthetic R50 evidence packet for mechanism mapped.",
"observed_at": "2026-09-03T12:00:00Z",
"owner": "Institutional mechanism auditor (fictional)",
"sequence": 2,
"state": "mechanism_mapped"
},
{
"evidence": "Synthetic R50 evidence packet for replacement detected.",
"observed_at": "2026-09-04T12:00:00Z",
"owner": "Change-control reviewer (fictional)",
"sequence": 3,
"state": "replacement_detected"
},
{
"evidence": "Synthetic R50 evidence packet for functional equivalence tested.",
"observed_at": "2026-09-05T12:00:00Z",
"owner": "Independent functional-equivalence lead (fictional)",
"sequence": 4,
"state": "functional_equivalence_tested"
},
{
"evidence": "Synthetic R50 evidence packet for evasion detected.",
"observed_at": "2026-09-06T12:00:00Z",
"owner": "Independent public-interest monitor (fictional)",
"sequence": 5,
"state": "evasion_detected"
},
{
"evidence": "Synthetic R50 evidence packet for proxy substitution tested.",
"observed_at": "2026-09-07T12:00:00Z",
"owner": "Proxy and feature audit lead (fictional)",
"sequence": 6,
"state": "proxy_substitution_tested"
},
{
"evidence": "Synthetic R50 evidence packet for federation scope checked.",
"observed_at": "2026-09-08T12:00:00Z",
"owner": "Federation accountability lead (fictional)",
"sequence": 7,
"state": "federation_scope_checked"
},
{
"evidence": "Synthetic R50 evidence packet for remedy effect observed.",
"observed_at": "2026-09-09T12:00:00Z",
"owner": "Independent outcome verifier (fictional)",
"sequence": 8,
"state": "remedy_effect_observed"
},
{
"evidence": "Synthetic R50 evidence packet for evasion contained.",
"observed_at": "2026-09-10T12:00:00Z",
"owner": "Independent public-interest signatory (fictional)",
"sequence": 9,
"state": "evasion_contained"
}
],
"status_note": "Evasion occurred and was contained; this is not displayed as a clean history.",
"summary": "A fictional housing institution renames a retired freshness rule, but synthetic applicants receive the same hold until the monitor detects and contains the workaround.",
"terminal_state": "evasion_contained",
"title": "Renamed rental screen reproduces the retired stale-data hold"
}Comparison examines remedy enforcement and evidence boundaries. It never ranks people.
0 of 3 enforcement receipts selected. Comparison examines institutional mechanisms and never ranks people.